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© EPM having an improvement in non-volatile storage of accounting data. 



© An electronic postage meter has two non-volatile memory devices 104,106. each of a different technology. 
CMOS battery-backed RAM and ^PROM. The E PROM technology allows a limited number of rewrites. In order 
to provide real-time accounting in such a non-volatile memory over the life of the meter, a trip data counter is 
stored in a circular data store in addition to a separate account of other postage accounting data, including 
printwheel setting information. The trip data counter is used for calculations of postage meter register data. The 
separate account is updated at predetermined intervals using the trip counter data if necessary for data 
recovery. 
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EPM HAVING AN IMPROVEMENT IN NON-VOLATILE STORAGE OF ACCOUNTING DATA 

The invention relates to electronic postage meters and more particularly to the storage of data in non- 
volatile memory in such electronic postage meters. 

Electronic postage meters are well known. Such devices operate under microprocessor control to 
perform printing in accounting operations associated with the printing of a postal indicia on an envelope, 
s Such accounting is usually carried out in a volatile memory and then transferred at a predetermined time to 
non-volatile memory for storage in the event that power is removed from the electronic postage meter. 

In conventional postage meters where real-time accounting is performed, every time postage is printed, 
the following information is normally updated within the postage meter's memories: ascending register, 
descending register, piece count, batch count, and batch amount. If all this data is stored in real-time in a 
w non-volatile memory and assumed to be stored in one buffer, this translates into the update of a 32-byte 
memory buffer for each accounting cycle. Normal meter lifetime specifications require 10 million accounting 
cycles and 1 million postage meter trips. While battery-backed CMOS RAMs used for example in U.S. 
Patent No. 4,484,307 have no problem wfth the 100,000 WRITES per byte that such specifications call for, 
E 2 PROMs typically have much less endurance. It will be noted there are E^ROMs which approach this 
is magnitude of endurance, but they are much more expensive than those with limited endurance of 10,000 
WRITES per byte. 

U.S. Patent No. 4,584,647 to Eckert entitled ELECTRONIC POSTAGE METER WITH A RING COUN- 
TER describes a ring counter in such in MNOS memory for storing a count representative of postage value. 
It will be appreciated that in this reference, there is no teaching of accounting for variable values of set 
20 postage. U.S. Patent No. 4,301.507 limits the WRITE to MNOS memory simply by writing to the non-volatile 
memory only during a power-down sequence. In other devices, for example, a high endurance E 2 PROM 
memory has been used for real-time accounting in non-volatile memory using the limited endurance MNOS 
memory only on power-down. 

It is an aim of the invention to enable the use of a lower endurance E*PROM device in a postage meter 
25 which allows real-time accounting in both memories. 

It is a further aim of the invention to extend the number of accounting cycles which may be recorded in 
a E 2 PROM of any particular endurance. 

It is expected that under normal circumstances, the user of a postage meter will set the printwheels to a 
given postage amount and then make multiple impressions before changing the postage amount. Because 
30 of this expected usage pattern, the lifetime of the electronic postage meter is specified for 1 million 
printwheel settings and require accounting for 10 million postage meter printing trips. 

In accordance with the invention, a data "store" containing at least 100 buffers having a "circular" 
organization will be kept in the low endurance E^PROM device. The term "circular" is used herein to mean 
that each time information is written to a buffer in the storage area, the buffer address will be sequenced by 
35 1. This data "store" will hereafter be referred to as "accounting data store" and has the following 
information: ascending register, descending register, piece count, batch count, batch amount, and postage 
value. 

In addition to providing the store for such accounting information, each buffer in this data store will also 
hold a pointer to a buffer in a circular "print counter" store in E*PROM memory. Preferably, this circular 
40 data store will be at least 2,000 bytes in length and is organized into two (2) byte buffers. Each buffer will 
contain two (2) redundant counters which are incremented each time a print cycle occurs. 

In accordance with the invention, the current value of the meter registers is not directly readable from 
the E 2 PROM. Rather, the register contents must be computed using data from both the accounting store 
and the print counter store. Thus, for example, the ascending register equals the ascending register plus 
45 (postage value times print counter value) and the descending register equals descending register minus 
(postage value times print counter value). 

It will be appreciated that at predetermined intervals, the data store in the E^ROM will be updated to 
incorporate the trip count data within the accounting date, store. Each time an updated buffer is written to 
the accounting data store, a pointer within that accounting data store is set equal to the location of two new 
so print counters. These counters will have been previously initialized to zeros. 

It is preferred that the condition under which an update of the E*PROM accounting store will take place 
are as follows: 1) change in print wheel setting, some non-volatile memory errors where an attempt is made 
to reconstruct data in the non-volatile memories and after a predetermined number of consecutive 
accounting cycles at the same postage value, suitably 15 consecutive cycles. 

Further features and advantages of the invention will be better understood from the following illustrative 
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description given with reference to the drawings in which: 

Fig. 1 is a perspective view of an example of electronic postage meter according to the invention; 
Fig. 2 is a schematic block diagram of the electronic postage meter of Fig. 1; 
Fig. 3 is a circuit diagram of an example of the memory module in the electronic postage meter; 
5 Figs. 4A, 4B, 4C. and 4D comprise maps of non-volatile memory registers; 

Figs. 5-11 comprise a flow chart illustrating a postage meter accounting and non-volatile memory 
access routine in a meter in accordance with the invention; 

Fig. 12 is the flow chart illustrating accounting for a postge meter print operation; and 
Figs. 13-14 comprise a flow chart illustrating a power up procedure of the non-volatile memories in 
w accordance with the invention. 

In Fig. 1, there is shown an electronic postage meter at 10. The meter 10 may have a keyboard and 
display (not shown in this figure) suitably covered by a door or a sliding fixture (also not shown). The meter 
10 is shown installed in position on a mailing machine 18. The mailing machine 18 includes, as 
schematically shown, a printing platen 20 driven by motor 22 which reciprocates platen 20, suitably via rack 
is and pinion gears 24. The entire meter is suitably enclosed in the mailing machine by hinged cover 26. 
Feeder module 28 feeds mailpieces to the base 18 which in turn transports the mailpiece to the space 
between the print die 30 and the platen 20 where upon reciprocation of the platen an imprinted indicia is 
placed upon the mailpiece as shown on mailpiece 32 being ejected from the mailing machine 18. 

Printwheels (not shown), set by stepping motors (also not shown), are arranged to print postage value 
20 on the envelope in conjunction with the remainder of the indicia. Further aspects of this meter are detailed 
in U.K. Published Patent Application No. 2,211,468 entitled A REMOVABLE POSTAGE METER HAVING AN 
INDICIA COVER. 

Fig. 2 is a circuit block diagram of the electronic postage meter. As seen in Rg. 2, the Central 
Processing Unit (CPU) 50, suitably a Model 8031 available from Intel, Santa Clara, California, receives its 

25 power from the power supply 52. The CPU 50 communicates address and data signals along with memory 
READ and WRITE signals in known manner to memory module 54 as well as to the decoder module 56. 
Read signals are transmitted to both on line 58 and WRITE signals on line 60, respectively. The multiplex 
address/data bus between the modules is shown at 62. Address bus 64 is also connected between the CPU 
50 and memory module 54. The three highest order address lines 66, 68, and 70 are also connected to the 

30 decoder module 56. NVM READ and NVM WRITE signals are developed in the decoder module 56 under 
command of the CPU 50 and are connected to memory module 54 on lines 72 and 74. 

The decoder 56 receives a CPU reset signal from power supply 52 on line 76 and with suitable internal 
logical manipulation in combination with other developed signals in the decoder module 56 provides a CPU 
reset signal to CPU 50 on line 78. A suitable circuit for providing a reset signal dependent on power and 

35 voltage conditions in the power supply is shown, for example, in U.S. Patent No. 4,547,853. A logic circuit 
for monitoring the reset from the power supply as well as other circuit parameters for developing a reset 
signal to the CPU is shown, for example in U.S. Patent No. 4,747,057. A decoder chip is described in U.S. 
Patent No. 4,710,882. As illustrated, the CPU 50 further communicates with LED drive module 80 to provide 
signals for the various sensors, the various stepper motor drivers (shown at 82) for positioning the postage 

40 meter printwheels (shown at 83), and solenoid drivers shown at 84 for controlling die-protector solenoids 
along lines 86, 88, and 90, respectively, through the decoder 56. 

Keyboard display module 92 receives and displays information to the CPU 50 in conventional manner 
on line 94. Information is also provided from the keyboard of the keyboard/display module 92 to decoder 56 
along line 96 in response to a strobe from the decoder 56 on line 97. External communications to the CPU 

45 are channelled through communication module 98 to the CPU on line 99. Typical features and the operation 
of postage meters are discussed, for example, in U.S. Patent No. 4,301.507 and U.S. Patent No. 4.484,307, 
both herein specifically incorporated by reference, and will not be further discussed. 

Rg. 3 is a block diagram of the memory module 54 in the electronic postage meter. Memory module 
54 comprises a Read Access Memory (ROM) 100 suitably Model 27C152 available from General Instru- 

50 ments, a CMOS random access memory (RAM) 102 such as Model number 62C64 available from NEC, a 
battery-backed RAM CMOS for non-volatile memory suitably Model number MK4802, available for example, 
from Mostek, at 104, and an E 2 PROM device 106 suitably a Model 28C64 available, for example, from 
AtmeL For best results, the battery-backed RAM 164 is connected to receive voltages from batteries 108 
and 110, each connected through diode 112 and 114, respectively, to the battery-backed RAM 104. Low 

55 order address data is furnished to each of the memories at input point 120 and is transmitted along 
connecting busses shown at 122, 124, 126, and 130. Multiplexed address and data are communicated to 
the module at input point 140 and communicated to the various memory devices along connecting busses 
shown at 142, 144, 146. and 148. The WRITE signal to RAM 102 is provided on line 150. A READ signal is 



3 



EP 0 376 487 A2 



sent along line 152 to both the RAM 102 and battery-backed RAM 104 on line 154. Non-volatile memory 
WRITE signal from the decoder 56 is provided at point 160 on lines 162 and 164. E^ROM 106 is READ 
under control of the signal on line 170. Memory 102, 104. 106 are selected as required by chip enable 
signals on line 180. 

s For best results, data within the postage meter is stored in the two (2) non-volatile memory devices. 
Each device uses separate memory technology (CMOS and E 2 PR0M) to help guard against the possibility 
of a dual device failure or a bad manufacturing lot. All critical information within the system is maintained 
redundantly in both the CMOS battery-backed RAM 104 and the E^ROM 106. In accordance with the 
invention any update of critical data within the CMOS non-volatile memory is immediately followed by a 

io corresponding update or copy to the E 2 PROM non-volatile memory. The redundancy allows data located in 
a "bad" section of either of the memories to be re-created from information in the alternate memory device 
as described below. 

Fig. 4A and 4B are a map of the addresses of pertinent or buffers of CMOS battery backed memory 
104 (Fig. 3), while Figs. 4C and 4D are a map of the addresses of the registers of E 2 PROM 106 (Fig. 3). 
15 As seen in Figs. 4A through 4D, each device is segmented into a set of data structures which are 
referred to herein as "stores". Each data store has one or more "buffers". Each buffer contains a set of one 
or more related data items. Thus, within a given store, each buffer will contain data items of the same type. 
The buffers within a given store are structurally identical, although the information content may vary 
between the buffers. 

20 The storage of related data items means that the data needed, for instance, for calculation in a 
particular operation may be retrieved in a more simplified manner than has previously been the case. 

Every data buffer is preferably fixed at 32 bytes in length. Even if the sum of the length of the data 
items in the store is less than 32 bytes, the remaining space will be unused. In accordance with the 
invention, each given data store uses either a "circular" or "ascending" buffer organization. If a data store 

25 uses a circular buffer organization, then prior to any update, an advance will be made to the next buffer in 
the store. After the last buffer in the store has been updated, the buffer pointer will loop back to the first 
buffer in the store. 

Circular buffers are implemented for a store when either it is necessary to maintain a history on the 
data items in either the CMOS or the E 2 PROM store or it is expected that the number of times that a given 
30 data item in the E 2 PROM store will be updated could exceed the endurance level of the E^ROM chip. It 
will be appreciated that in order to allow such a circular buffer organization, the data store must contain one 
(1) strictly increasing data item. This means that the value of this data item will increase each time a buffer 
is written to the store. 

In accordance with the present invention, a data store will use an ascending buffer organization 
35 whenever a circular buffer is not required. For such an ascending buffer, advance to the next buffer is only 
made when there is a non-recoverable hardware failure within a current buffer address range. That is, there 
will be a no advance to the next buffer prior to an update of information. 

For best results, each data buffer will have an attached cyclic redundancy code (CRC) calculated. A 
single CRC is computed across all of the data items within the buffer. If the buffer contains unused space, 
40 the CRC calculation does not include such unused bytes. It will be appreciated that the calculation of a 
single CRC for the entire buffer will save considerable space over that required for CRC's for each data 
item. 

Each of the non-volatile memory devices 104 and 106 are divided into 32 byte segments. Each buffer 
begins on the segment boundary. 

45 The lowest address space of each device is occupied by a bad segment data store. It will be 
understood that this data store could be located at other addresses as desired. This data store contains a 
bit map indicating good and bad segments within the device. Each segment of the device has a 
corresponding bit within the bad segment data store. This bit is turned on or off to indicate whether the 
corresponding segment can be used. For best results, each device maintains four (4) copies of the bit map 

so for its own device only. That is, the copies of the CMOS bit map are stored only in the CMOS device and 
for the E?PROM, the bit map copies are stored only in the E 2 PROM device. The bit maps are seen in Fig. 
4A at 200 and Fig. 4C at 300. 

Each data store preferably has an entry in a ROM table. Table 1 in the Appendix hereto illustrates an 
example of such a ROM table. It contains information about data store characters. For each data store, the 

55 table contains information such as: organization, number of data bytes per buffer, beginning address of the 
store, ending address, the minimum number of segments which must be available in order for the system 
to continue reliable operation and whether the store resides in CMOS memory only or in both the CMOS 
and E 2 PR0M memories. 
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As discussed further below, for each data store, a pointer to the current buffer in that store is kept in 
RAM. These pointers are initialized at power up and are updated each time a buffer advance is necessary. 
Table 1 also shows these store definitions which contain the changing information about acceptable access 
to the memory structures. 

5 As also seen in Table 1, each non-volatile memory data store suitably has a corresponding buffer in 
RAM for use when reading or writing to the devices. The buffers in the CMOS and E^ROM NVMs shown 
in Figs. 4A through 4D, indicate the postage meter trip information at 210 and 310, recovery information 
initialization 220 and 22o' t recharge information 230 and 330, error information 240 and 340, configuration 
information 250 and 350 flags and device status 260 and 360. and data as to the parameters of the 

to particular meter, 270 and 320. Additionally, there are a main and alternate store in CMOS memory for 
storing non-critical data (280 and 280') while in the E^ROM there is a 2560 byte store for the Trip Count, 
shown at 380. The trip information includes 6 bytes of funds in the ascending register plus 5 bytes of funds 
in the descending register: the piece count has 4 bytes, batch count has 3 bytes, batch amount 6 bytes of 
funds, and the postage value set requires 3 bytes. 

is In addition to containing accounting information, each buffer in the accounting data store will also 
contain a pointer to a buffer in a circular "print counter" store in the E^ROM. Preferably, this circular data 
store will be a least 2000 bytes in length and will be organized into 2 byte buffers. Each buffer contains 2 
redundant counters. These counters will be incremented each time a print cycle occurs. 

In accordance with the method for updating disclosed herein, the current value of the meter registers 

20 will not necessarily be directly readable from the E 2 PROM. Rather, the meter register contents are 
calculated using data from both the accounting store and the print counter store in the E^ROM. The 
calculations to be used in determining the register values are as follows: 

1 . ascending register value = ascending register value in data store + (postage value * print counter 

value) 

25 2. descending register = descending register value in data store -(postage value " print counter 

value) 

3. batch amount = batch amount + (postage value * print counter value) 

4. piece count = piece count + print counter value 

5. batch count = batch count + print counter value 

30 It will be seen that if the print counter value is 0, the values will be those stored in the accounting data 
store. 

Figs. 5A and 5B through Fig. 11 illustrate a flow chart of the accounting driver routine 400 in the 
postage meter for accounting for postage meter funds and for updating non-volatile memory in accordance 
with the trip routine discussed in conjunction with Fig. 12. It will be understood that other postage meter 

35 CPU routines will control performance of the other tasks required for tasks such as setting the printwheels, 
allowing postage to be printed by energizing and de-energizing the die-protection solenoids, communicating 
with peripherals and the like. It will be understood that these tasks may be performed in sequences as 
described in U.S. Patent 4,301.507 and 4,710,883. 

Figs. 5A and 5B comprise a flow chart illustrating the top-level control process for the accounting driver. 

40 The routine examines an ACCT-OPERATION input and passes control to either the Read Trip or Write Trip 
routine. If the Read Trip routine returns a status of CMOS.RECOVERY, control is again passed to the Write 
Trip routine to perform the recovery of CMOS data. In all other circumstances, the status from Read Trip 
routine or the Write Trip passes control back to Task Processing. 

In the ACCOUNTING DRIVER routine 500, as shown in Rg. 5A, the ACCT-OPERATION input is tested 

45 in decision block 510. If the ACCT-OPERATION = READ is negative, the WRITE-TYPE = ACCOUNTING 
OPERATION is selected, block 520 and the WRITE TRIP subroutine is called at block 530. The WRITE 
TRIP routine is discussed below. 

Continuing again from decision block 510, if the TEST for ACCT-OPERATION = READ is YES, the 
routine attempts to READ the current trip information store from NVM. It will first try to retrieve the data 

so from the CMOS memory 104. If the data cannot be retrieved, the routine attempts to get the trip data from 
E?PROM memory 1 06. In the event that this retrieve is required, the accounting values are reconstructed as 
discussed previously by multiplying the count stores in the E^ROM trip counter by the set postage value 
stored in the trip data. 

The routine proceeds to set up to READ the trip information from the CMOS NVM 104, block 540, and 
55 the NVM DRIVER routine is called, block 550, to READ the information stored in the CMOS memory 
buffers. If the status after the READ has been completed returns as OK, block 560, the program control is 
returned to task processing. If the READ status checked at block 560 is not OK, then the routine sets up to 
READ the information from the buffers of the E^ROM memory, block 570 and NVM DRIVER is again 
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called at 580 to READ the PPROM. 

If the status of this READ out of the E 2 PROM, checked at decision block 590 is not OK, a fatal error flag 
is set since both devices cannot be read and meter fatal error processing is initiated to shut down the 
postage meter, ff status of this Read at block 590 is OK, then the Trip Counters in the E 2 PROM memory are 
5 READ, block 600, and the result of this READ is tested at decision block 610. 

In the event that the READ is OK, the routine proceeds to reconstruct the accounting data in RAM for 
the CMOS memory from that in the E 2 PROM, block 630. 

If the READ of the trip counters is not OK. the routine attempts to fix corrupted print count data by 
copying the data stored in the random access memory into a new buffer in the E^ROM, block 620. The fix 
70 is tested at decision block 640. If it is not achieved, a FATAL ERROR is set since both memories again 
cannot be READ. 

However, if the appropriate fix has been achieved, the routine proceeds as well to block 630 to 
reconstruct CMOS data as noted previously. The ACCT.OPERATION is set to CMOS-RECOV. block 650, 
and the routine loops back. 

;s Fig. 6 shows the WRITE subroutine for the accounting driver at 700. At decision block 710, the WRITE 
TYPE is tested and if the CMOS RECONSTRUCT is set, the YES branch of the decision block 710 sets up 
the WRITE CMOS memory with the "Auto-Advance to the next buffer" set to false at block 720. At block 
730, the NVM DRIVER routine is called to overwrite the CMOS accounting data as described previously 
with the accounting driver routine. The program then returns to the accounting driver routine. 

20 Returning to decision block 710, if the WRITE-TYPE is not equal to CMOS reconstruct, the NO branch 
is selected and the routine tests for whether the WRITE-TYPE is a non-trip, block 740. Such non-trip 
accounting is called for, for example, when the requirement is to clear a batch register, set postage 
recharging information and the like. At the YES branch of decision block 740, that is. when the WRITE- 
TYPE equals non-trip, the routine progresses to check the trip counters in the E z PROM memory, block 750. 

25 If the trip counters are set equal to zero, the YES branch proceeds to set the WRITE-TYPE equal to OVER- 
WRITE, block 760 and returns to the main line of the WRITE Accounting Driver routine. In the event that the 
trip counter is not equal to zero, the NO branch sets the WRITE-TYPE equal to E*PROM Memory Update, 
block 770, to update the data stores in E*PROM prior to the next step. 

Returning to decision block 740, if the WRITE-TYPE equal non-trip is NO, the NO branch proceeds 

30 directly to test whether the WRITE-TYPE is equal to OVER-WRITE, decision block 780. If the WRITE-TYPE 
equals OVER-WRITE, the YES branch proceeds to call the OVER-WRITE subroutine, block 790. If the 
WRITE-TYPE does not equal OVER-WRITE, the NO branch of decision block 780 falls to block 800 to 
check whether the WRITE-TYPE equals ACCOUNT. If the WRITE-TYPE is equal to ACCOUNT, the YES 
branch of decision block 800 proceeds to call the ACCOUNT routine, block 810. If the WRITE-TYPE does 

35 not equal ACCOUNT, the NO branch of block 800 proceeds to call the E^ROM MEMORY UPDATE 
routine, block 820. 

Rg. 7 illustrates the OVER-WRITE routine at 900. This routine serves to simply copy data from RAM 
buffers into the data store in a particular non-volatile memory. This routine begins at block 910 by placing 
the trip count pointer into the RAM buffers. The program sets up, at block 920, for the WRITE to the CMOS 

40 memory with the Auto-Advance flag set false. That is, the buffers in CMOS memory will simply be 
overwritten by the data in corresponding RAM buffers. 

The NVM DRIVER routine is then called at block 930 to WRITE the data to CMOS and when it returns 
successfully, an update recovery address which has been previously set will be cleared at 940. The 
purpose of this block 940 will be discussed below in conjunction with TRIP ACCOUNTING and power-up of 

45 non-volatile memory. The routine proceeds to block 950 to set up for writing to the E 2 PROM memory, again 
with the Auto-Advance set to false. The non-volatile memory driver is called at 960 and the recovery 
address is cleared at block 970. The routine then returns to the ACCOUNTING DRIVER routine. 

Rg. 8 illustrates the ACCOUNT routine beginning at 1000. The routine is initiated by putting the trip 
count pointer in RAM buffer, block 1010 and it proceeds to set up for writing to the CMOS memory with, in 

so this case, the Auto-Advance being true, block 1020. The non-volatile memory driver is called to WRITE the 
CMOS block 1030 and upon successful completion of the WRITE, the recovery address is cleared, block 
1040. The program proceeds to set upr to increment the" trip counters in the E 2 PROM, block 1050, and the 
trip counters are tested to determine whether the trip counter has reached a predetermined number, 
suitably 15, for the E 2 PROM used in the present postage meter. If the trip counters have reached 15. the 

55 YES branch returns a status of "Need-to-Update E 2 PROM memory" to the calling module, block 1080, and 
the program returns to call the UPDATE E^ROM routine. If the trip counter value does not equal 15, the 
NO branch of decision block 1070 returns to the TRIP ACCOUNTING with a status indicating success. 
The UPDATE OF E 2 PROM routine is shown in Rg. 9 beginning at 1100. This routine proceeds at block 
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1110 to calculate the next Trip Count pointer and to initialize new trip counters to zero, block 1120. The new 
Trip Count pointer is then stored in the RAM buffer, block 1 1 30 and the set up to WRITE CMOS memory 
with the Auto-Advance false is made, block 1140. The NVM DRIVER is called at block 1150 to WRITE to 
the CMOS memory and an update to the recovery address with Power Fail Acct-E 2 PROM Update is made 

s at block 1160. after successful completion of the WRITE to CMOS memory. The WRITE from RAM to 
E2PROM memory with the Auto-Advance set to TRUE is carried out at block 1170. the NVM DRIVER is 
called at block 1180 and finally, the recovery address buffer is cleared at block 1190. The routine then 
returns to TRIP ACCOUNTING. 

Turning now to Fig. 10, the NVM DRIVER routine is shown at 1200. A routine called NVM DRIVER may 

10 elect to read information from the CMOS memory, from the E 2 PROM memory or from both memories. As 
seen from Table 1. the NVM devices are numbered. In this routine, at block 1210, save device non-volatile 
memory equals device number. This number is tested at block 1220 and if the number corresponding to 
"BOTH DEVICES" is selected, the YES branch of the block proceeds to choose the Device Number equals 
CMOS at block 1230 to initiate the routine. 

15 Next, at block 1240, the operational flag is tested to see whether a READ operation is requested, and if 
not, the NO branch of decision block 1240 calls the WRITE routine (for non-volatile memory driver) at block 
1250. The YES branch of decision block 1240 proceeds to check whether the buffer to be read is marked 
BAD at decision block 1260. The NO branch of this decision block 1260 indicates that the buffer is not BAD 
and the program proceeds to READ the data from the selected non-volatile memory device at block 1270. 

20 The READ is tested at decision block 1280 and if it is OK, the YES branch returns to the ACCOUNTING 
DRIVER program. If the READ was not OK, the buffer is marked BAD, block 1290 and a test is made if 
there are sufficient GOOD buffers left at block 1300. If there are sufficient buffers, the YES branch sets a 
non-fatal error code at 1310. If there are not sufficient GOOD buffers left, the NO branch proceeds to set a 
fatal error code at 1320 and both branches then proceed to decision block 1330 where the SAVE DEVICE 

25 NUMBER is again tested to see if it was set to read "BOTH DEVICES". 

- Returning again to decision block 1260, if the answer is that the buffer was marked BAD, an error code 
is set at block 1340 and a return is made to the main line as above to test at block 1330 whether the device 
NVM is equal to "BOTH". The NO branch of this decision block 1330 returns an error code. If the answer is 
YES. the device number is checked to see whether it is equal to CMOS ONLY at decision block 1345. If 

jo NO, the DEVICE NUMBER is checked to see whether it is equal to E^ROM at decision block 1350. 

The NO branch of decision block 1350 proceeds to block 1360 where the device is set equal to 
E*PROM and a return is made to check whether the buffer is marked BAD at decision block 1260. If the 
selected branch at decision block 1350 is YES, a fatal error code is set at block 1370 and the error code is 
returned. 

35 Returning to decision block 1345, if the answer is YES, the YES branch proceeds to decision block 
1380 to determine if the CMOS Memory Alternate is set. If it is, the routine returns. If NO, the NO branch 
proceeds to set the device equal to CMOS ALT, block 1390 and loops back for reading the data. 

The WRITE routine for non-volatile memory driver is illustrated in Fig. 11 at 1400. When the WRITE is 
called, the store code is tested at block 1410 to determine if the store is circular. If the store is circular, the 

40 YES branch leads to a test in decision block 1420 whether the Auto-Advance to set to TRUE. If Auto- 
Advance is TRUE in block 1420, the YES advances the pointer to the next buffer, block 1430 and returns to 
the main line. Similarly, if the test of the Auto-Advance in block 1420 is NO or if the store is not circular, the 
NO branch proceeds to the main line to decision block 1440 to determine if the buffer is marked BAD, 
decision block 1440. 

45 If the buffer is not BAD, the NO branch at decision block 1440 proceeds to the WRITE data block 1450. 

If the buffer is marked BAD. the YES branch proceeds to block 1460 which advances the pointer to the next 

buffer, block 1460. and loops back to test the buffer at block 1440.. 

The WRITE is tested at decision block 1470 and if it is not GOOD, the NO branch proceeds to block 

1480 to mark the buffer BAD and the test is made at block 1490 to determine whether there are sufficient 
so GOOD buffers are left for operation. The YES branch of decision block 1490 loops back to the start of the 

WRITE program. 

If there are not sufficient GOOD buffers, the NO branch proceeds to set a fatal error code at block 1500 
and rejoins the main line at the YES branch from decision block 1470. In either event, the SAVE DEVICE 
NVM number is checked to see whether it is equal to BOTH DEVICES, block 1510 and if the answer is NO, 
. 55 the NO branch returns to the NVM DRIVER routine. If the answer at decision block 1510 is YES. the YES 
branch proceeds to decision block 1515 to determine if the store is to CMOS Memory Only. If the CMOS 
Memory Only is set, the YES branch of decision block 1515 proceeds to decision block 1540 to test 
whether CMOS.ALT is set. If it is, the routine returns, if no, the NO branch from block 1540 sets the device 
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equal to CMOS Alternate, block 1550. and loops back. 

Returning to decision block 1515. if the answer is NO, the routine falls to decision block 1520 to test 
whether the device number is equal to IFPROM at block 1520. If the answer is YES. the routine again 
returns to the main NVM DRIVER routine and if not, the device number is set equal to E 2 PROM block 1530 
s and the program loops back to the start of the WRITE routine. 

We are now in position to discuss the actual trip accounting process. Fig. 12 is a flow chart of the 
accounting and NVM update which is required for each "trip" or print of postage value. The printwheels will 
have either remained in a previously set condition or have been changed to a new postage setting by a 
communication from the operator or a peripheral device. As discussed previously, every time postage is 
10 printed, the following information has to be updated within the postage meter non-volatile memories to 
account for the printing of the postal value set on the printwheels: the ascending register, descending 
register, piece count, batch count, and batch amount. The ascending register accounts for the total amount 
of money expended by the postage meter whereas the descending register accounts for the funds 
remaining in the postage meter. Piece count, batch count and batch amount are normally set to zero at the 
75 start of a run so that the number of envelopes to which postage is applied. The batch amount and batch 
count are normally resettable to zero by the operator to allow the operator to keep track of the actual 
postage used during a current run as well as the number of pieces in the run. 

An additional value stored in accordance with the invention is the value of postage to which the 
printwheels are set. 

20 The first step in the trip account routine 1400 is therefor to perform a check of the setting of the 
printwheels to determine whether there has been a change in the set value since the last meter trip, block 
1410. If there has been a change, the YES branch proceeds, block 1420, to place a Power Fail-Non Trip 
recovery address into a main and alternate buffer in CMOS NVM 104. The ACCOUNTING DRIVER routine 
is then called, with parameter set to NON-TRIP, block 1430, to update the data stores, both in the CMOS 

25 and in the E 2 PROM. During the course of a successful memory update, the recovery address buffer is 
cleared and the program returns to join the NO CHANGE branch from block 1410. 

The next step, block 1440, is to perform a scratch pad accounting in RAM. The newly computed 
ascending and descending register information, etc., is placed in RAM buffers for transfer to corresponding 
buffers in the NVMs. 

30 It will be appreciated that this is a critical moment because when power to the electronic postage meter 
is lost, the contents of this temporary memory is lost. To avoid the loss of critical information as the status 
of critical data changes, it is now immediately transferred to NVM. In order to protect the data transfer, in 
accordance with the invention, each time such an update to the CMOS non-volatile memory is required, 
there is set up a Power Fail-Account Recovery address as shown in block 1450. This address is a pointer to 

35 a program in ROM which will cause the postage meter program to call a routine to restart in power-up from 
the initial point of the TRIP ACCOUNTING in order to cycle through the routine from the beginning of the 
trip. No attempt is made to continue the accounting from the exact point of power fail. For best results, the 
Power Fail Trip recovery address is stored both in a main and an alternate memory buffer in CMOS 
memory along with a CRC for each. 

40 The next block, 1460 calls the ACCOUNTING DRIVER (500) for the accounting process. It will be 
remembered that in the discussion of the ACCOUNTING DRIVER routine, the significance of the clearing of 
this Power Fail Account address was not specifically discussed. Here it becomes evident that the address 
set in this TRIP ACCOUNTING routine will allow recovery by returning the calculations to the start of this 
trip even if the update process has been nearly completed. The address is then cleared once the NVM 

45 memory update has been completed. 

When ACCOUNT returns to the Trip routine, the status of the Trip Counter is checked, decision block 
1470, if the counter has not reached 15, the NO branch of the routine returns to Task Processing. If the 
counter has reached 15, the YES branch of decision block 1470 proceeds to set up a Power Fail-Trip 
^PROM UPDATE address, block 1480. and to invoke the ACCOUNTING DRIVER with parameter set to 

so E^ROM UPDATE, block 1490. After a successful WRITE, the TRIP routine returns to Task Processing. 

Figs. 13 and 14 comprise a flow chart illustrating the power-up procedure of the accounting portions of 
non-volatile memory. In Fig. 13. the NVM power-up routine is shown at 1600. A power-up flag is checked 
and the routine initializes the device bit map, block 1610. It will be recalled that each device maintains four 
(4) copies of the bit map in its lower address registers. The first GOOD copy is determined and the bit map 

55 for each device is transferred to RAM. At block 1620, the counters representing the numbers of GOOD 
buffers are READ from non-volatile memory. Next, at block 1630. the starting addresses for the stores are 
transferred to RAM. It will be appreciated that this was the initial address data that is placed in ROM. The 
next step is to initialize the store pointers at block 1640 based upon the current non-volatile memory status 
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and bit maps initialized in block 1610. 

The routine then proceeds at block 1650 to the POWER FAIL recovery processing. The routine then 

falls to block 1660 where the CMOS and E^ROM trip buffers are checked to determine whether the buffers 

are equal. If at decision block 1670, the E 2 PROM and CMOS are not equal, the NO branch proceeds to set 
5 the buffers equal using the copy with the highest piece count, block 1680, and returns to the application 

program, otherwise, the routine returns directly to application program at the YES branch. 

Fig. 14 shows the power-fail processing at 1700. It will be recalled that the recovery addresses are 

stored in a main and alternate buffer in CMOS memory. The power-up processing routine reads the 

recovery data in the main CMOS memory block 1710 and if the CRC is GOOD at decision block 1720. the 
w YES branch proceeds to block 1730 to check the recovery address. If the recovery address equals zero at 

block 1740, there is no indication of incomplete accounting and the YES branch returns to main NVM 

power-up program. 

If the check says that the recovery address is not zero at decision block 1740. the NO branch causes a 
call of the recovery routine at the recovery program address in non-volatile memory, block 1750. Returning 
is to decision block 1720, if the CRC is determined not be GOOD, the NO branch falls to block 1760 to read 
the recovery data in the alternate CMOS register. The CRC is checked in block 1770 and if it is also found 
not GOOD, the NO branch sets a fatal error since neither memories* recovery data can be read. 

If, however, the CRC is GOOD on this decision block 1770, the YES branch falls to decision block 1780 
to determine whether recovery address is equal to zero. If YES, the routine returns to NVM power-up since 
20 no further action is required. If the recovery address is not zero, the NO branch causes a jump to recovery 
program address stored in the non-volatile memory block 1790. 

The Appendix comprising Table 1 is attached hereto. Table 1 illustrates the mememory store definitions 
in accordance with the invention. 

25 
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APPENDIX 



S 

TABLE 1 



10 

STORE DEFINITION 

MEMORY_S?EC is a ROM store which holds descriptive information 
about RAM and NVM memory layout 



MEMORY_SPEC - STORE_S?EC + BITMA?_S?EC 

* STORE_SPEC holds descriptive information about all data stores 

in both NVM devices which are accessed via the NVM driver software. 
Since the data store EEPROM_TRI?_CNT is not accessed via the NVM 
driver software, it does not have an entry in STORE_SPEC. * 

5T0RE_S?EC - { { STORE DESC ] 8 ) 2 



* STORE_DESC holds descriptive information about a particular 
data store within a particular NVM device * 

25 STORE_DESC - START ADDR + END ADDR + ORG_TYPE + MIN_GOOD_BUFFS + LENGTH 

~+ cmos_only 
STARTJIDDR - "address" 
END_ADDR - "address" 
ORG_TYPE - {"ascend" | "circular"] 
MIN_COOD_BUFFS * "1 byte count" 

LENGTH - "1 byte count" * NOTE : does not include CRC * 

30 CMOS_ONLY - ["true" | "false"! 

BITMAP_SPEC - RAM_BITMAP_ADDR + NVM_BITMAP_ADDR -»■ BITMAP_LEN 

* RAM BIT_ADDR stores the RAM addresses of the bitmaps for 
botR NVM devices * 

35 

i ituyJ* KuOti - i "aaaress 

MVM_BIT ADDR stores the NVM addresses of each of the 4 copies 
)i the Bitmap for both NVM devices * 
M BITMAP ADDR - ( { "addre SS " } 4 1 2 
40 "** 

BITMAP_LEN stores the length of the bitmap { NOT including CRC) 
for both NVM devices * 
BITMAP_LEN - {"1 byte count"! 



45 



so 



55 
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APPENDIX 



TABLE 1 (Cont'd) 

5 

STORE DEFINITION 

ACC£SS_tNFO contains dynamically changing informtion about 
acceptable access to memory structures 

# 

70 ACCSSS_INFO - STORE_ACCESS ♦ BITMAP_ACCESS 

STORE_ACCESS - PT RATABLE + NUH_GOOD_BUFFS + RAM_BITMAP 

BITMAPJVCCESS - BAD_BITMAP + RAM_BITMAP 

75 UPD_BAD_ACCESS - BITKAP_ACCESS ♦ NUM_G0OD_BUFFS 

PTR_TABLE - {( "address" }9 }2 * A table in ROM containing current pointers 

for NVM device stores. An entry is kept 
for each store represented in RAM_STORES 
plus an entry is also kept 
for EE?$tOh_TRIP_CNT. * 

2Q BAD_BITMA? - { ("1 byte flag" } 4 }2 

NUM_GOOD_BUFFS - [[ n l byte count" }9}2 • an entry for each store represented 

in RAM_STORES plus an entry for 
EE?ROM_TRIP_CNT * 

RAH BITMAP - { BITMAP J 2 * RAM_3ITMAP is a RAM Store which contains 

~ the most current copy of the bitmap for 

both NVM devices * 

BITMAP - { •byte* )32 * each bit in BITMAP signifies whether a 

given segment is good or bad within a 
specific NVM device * 

30 * 

STORE DEFINITION 

RAM FLAGS is a control store which contains flags indicating 
the~status of the NVM devices 

____ _______ * 

35 

RAM FLAGS - CMOS BAD + EEPROM_BAD 
CMOS_BAD - ("true- | -false" 1 
EEPROfl BAD - I "true" | "false") 
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APPENDIX TABLE 1 (Cont'd) 



STORE DEFINITION 



Each NVM data store will have a corresponding buffer in 
RAM_STORES for use when reading or writing to the devices. 

RAW STORES - TRI?_INFO + RECOV_INFO + 

~" RECHARGE INFO ♦ PARAM_INFO + FATAL INFO + CONFIG INFO + 

NON CRIT~1 ~ 



CMOS DEVICE - CMOS BITMAP + CMOS STORES 
15 ~ 

CMOS STORES - TRIP INFO + [RECOV INFO} 2 + 

~" RECHARGE INFO + PARAM INFO + FATAL INFO ♦ CONFIG INFO + 

(NON CRIT 1)2 



20 



EEEROM DEVICE - EEPROM BITMAP + EEPROM STORES 



25 



EE?ROM_STORES - TRIP INFO + 

RECHARGE_INFO + PARAM_INFO + FATAL INFO + CONFIG_INFO 
+ EE_TRIP_CNT ~ 

NVH_BITMAP - [CMOS_BITMAP | EE?ROM_BITMAP 1 

CMOS_BITMAP - BITMAP 
EE? ROM_B I TMA? - BITMAP 

30 TRI?_INFO - MEMORY_BUFFER 
RECOV_INFO - MEMORY_BUFFER 
RECHARGE_INFO - MEMORY_BUFFER 
PARAM INFO - MEMORY BUFFER 
FATAL~INFO - MEMORY~BUFFER 
CONFIG_INFO - MEMORY_BUFFER 
NON_CRIT_l - MEMORY_BUFFER 
MEMORY_BUFFER - ( -byte") 32 

EE_TRIP_CNT - { "2 bytes") 1280 



35 



40 * Each data store will be assigned a reference number * 

STORE NAME - (TRIP_STORE | RECOV STORE ) RECHARGE STORE | PARAM_STORE 
" | FATAL_STORE | CONFIG_STORE | NONCRT STORE | 

EE TRIP CNT STORE 1 ~ 



45 



TRIP_STORE - "O" 
RECOV STORE - T 
RECHARGE_STORE - w 2" 
PARAM STORE - "3" 
FATAL^STORE - "4" 
CONFIG_STORE - "5" 
NONCRl_STORE - m S n 
50 EE TRIP CNT STORE - "7" 



DEVICE PARAM - ( CMOS | EEPROM | BOTH-| CMOS ALT ) 



55 
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APPENDIX 
TABLE 1 (Cont'd) 

5 



10 



IS 



20 



25 



®£.v iCL^nOH o I CMOS | EE PROM J 
PT-t_DEVICE_NUK - [CMOS | EZ?ROM ] 

CMOS » "X" 
SEPROH « "2" 
30TH - •3" 
CMOS_ALT o "4" 

OEV_AND_STORE « DEVICS_NUM + PTRJ)EVICS_NUM ♦ ST0RE_NAHE . 
REAO_PARAMS ° AUT0_3ADJJPD * AUT0_REC0V+ DEV_AND_STORE 
«fRITE_PARAMS = AUTO_ADV + DEV AND_STORE 

DRIVER^PARAflS « OPERATION + STORE_NAME + DEVICE_PARAM + [AUTO_ADV | AUTO RECOV 

OPERATION = ["read" | "write") 
AUTO_RECOV o [ "true" | "false" ) 
AUTO_BAD_UPD « [ "true** I "false" J 
AUTO ADV - ( -true" | "false" J 



30 Claims 

1 . A postage meter comprising: 

a microcomputer operating under control of a microcomputer program; 

a non-volatile memory connected to said microcomputer for storing accounting data; 
35 printing means for printing an indicia, said indicia including a value; 

said printing means being operatively connected to said microcomputer and wherein printing of said value 

is accounted for by said microcomputer and said accounting data stored in said non-volatile memory; 

said non-volatile memory having a first plurality of buffers comprising an accounting data store and a 

second plurality of buffers comprising a print counter store; wherein the accounting data is calculated from 
40 accounting data stored in said first plurality of buffers and said print counter data store in said second 

plurality of buffers. 

2. The meter of claim 1 further comprising means for updating said accounting store from data in said 
print counter store. 

3. The meter of claim 1 whereiri said non-volatile memory is an t^PROM memory. 

45 4. The meter of claim 3 wherein said non-volatile memory is a low endurance non-volatile memory and 
said second plurality of buffers are arranged in a circular buffer arrangement. 

5. The meter of claim 1 further comprising a second non-volatile memory of high endurance for storing 
real-time accounting information. 

6. The meter of claim 5 wherein said second non-volatile memory is a battery-backed CMOS randon 
so access memory (RAM). 

7. In a postage meter, the improvement comprising a non-volatile memory module including first and 
second non-volatile memories accessible by a microcomputer for accounting for postal value, said first 
memory having an accounting "data store for storing accounting information relative to the real-time 
accounting of the printing of postage meter funds and said second memory having a first plurality of buffers 

55 for holding accounting data and a second plurality of buffers for holding print counter information from 
which data of a current accounting may be computed. 
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FIG. 4 A 
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DESCRIPTION 



BITMAP SECTION 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL, 80 HEX 



TRIP INFO 
16 32-BYTE BUFFERS 
BYTES: 512 DECIMAL 200 HEX 



RECOVERY INFO MAIN 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL. 80 HEX 



RECOVERY INFO ALT 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL, BO HEX 



RECHARGE INFO 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL, 80 HEX 



PARAM INFO 
2 32-BYTE BUFFERS 
BYTES: 64 DECIMAL 40 HEX 



FATAL INFO 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL 80 HEX 



CONFIG INFO 
2 32-BYTE BUFFERS 
BYTES: 64 DECIMAL, 40 HEX 



NON-CRIT-l INFO 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL, 80 HEX 



N0N-CRIT-2 INFO 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL. 80 HEX 
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FIG. 4B 
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DESCRIPTION 



FREE SPACE AREA 
BYTES: 256 OECIMAL, 100 HEX 



HIGH SPEED ERROR 
CODES AND SIGNATURES 
BYTES: 240 DECIMAL. FO HEX 



CMOS OVERVIEW 



1 



ONE-TIME INITIALIZATION FLAG, 
CMOSJATTJYTE AND DEVICE STATUS BYTES: 
BYTES: 4 DECIMAL, 4 HEX 



260 
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FIG. 4C 
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DESCRIPTION 

BITMAP SECTION 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL, 80 HEX 



EEPROM OVERVIEW 
-300 



FREE SPACE AREA 
BYTES: 16 DECIMAL. 10 HEX 



ONE-TIME INITIALIZATION FLAG. 
BADJATTJW AND DEVICE STATUS BYTES 
BYTES: 4 DECIMAL. 4 HEX 



FREE SPACE AREA 
BYTES: 108 DECIMAL. 6C HEX 



TRIP INFO 
104 32-BYTE BUFFERS 
BYTES: 3328 DECIMAL. DOO HEX 



RECHARGE INFO 
4 32-BYTE BUFFERS 
BYTES: 128 DECIMAL. 80 HEX 



PARAM INFO 
2 32-BYTE BUFFERS 
BYTES: 64 DECIMAL. 40 HEX 



FATAL INFO 
4 32-BYTE BUFERS 
BYTES: 128 DECIMAL. 80 HEX 



CONFIG INFO 
2 32-BYTE BUFFERS 
BYTES: 64 DECIMAL. 40 HEX 



FREE SPACE AREA 
BYTES: 128 DECIMAL. 80 HEX 
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FIG. 4D 
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DESCRIPTION 

EEPROM TRIP COUNT 
BYTES: 2560 DECIMAL, AOO HEX. 



FREE SPACE AREA 
BYTES: 1536 DECIMAL, 600 HEX 
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FIG. 5 A 
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FIG. 6 



SETUP WRITE 
CMOS MEMORY 
AUTO-ADVANCE 
FALSE 



CALL NVM 
DRIVER 




RETURN 



1 



760 



WRITE TYPE = 
OVERWRITE 



WRITE TYPE = f 
E2PR0M MEMORY v 
UPDATE 



I 



770 



780 




.YES 


CALL 




OVERWRITE 



if 



790 



YES 


CALL 




ACCOUNT 



if 



810 



EP 0 376 487 A2 




FIG. 7 
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FIG. 8 
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FIG. 13 
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FIG. 14 




